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Digital Media Distribution Method And System 

The present invention relates generally to computers and computer software 
and more specifically, to a method and system for secure distribution of digital media 
5 files over computer networks. 

Background of the Invention 

It is well known that data communication networks such as the Internet, Wide 
Area Networks (WANs) and Local Area Networks (LANs), offer tremendously 

1 0 efficient means of organizing and distributing computerized data. These efficiencies 
have resulted in their widespread use for both business and personal applications. 
The Internet for example, is now a common medium for operating online auctions, 
academic and public forums, distributing publications such as newspapers and 
magazines, and performing electronic commerce and electronic mail transactions. It 

15 is also a common medium for distributing electronic content including audio, video, 
still images, text and multi-media (i.e. combinations of these forms). 

In fact, the widespread use of distributed computing and file-sharing 
networks, such as the Internet, has enabled consumers to become distributors of 
digital content, allowing anyone to copy and redistribute free and/or illegal copies of 

2Q songs, photographs, videos and other digital content. 

Creators of media content have a property right to the content they create, 
usually enforceable via copyright or trademark laws. The concern is the copying and 
distribution of this content without compensating the rights holders. The mechanism 
to protect and track digital content is referred to as Digital Rights Management 

25 technology or "DRM". DRM is widely accepted as a requirement for the distribution 
of media over the Internet. 

Historically, copying of music was not as great a concern because of the 
nature of the media and the copying technology. Music was distributed on physical 
media such as tapes, CDs (compact-disks) or vinyl albums, or via comparatively low- 

30 quality AM and FM radio transmissions. Copying content in such formats had severe 
shortcomings: 

1 . quality was not exceptional to begin with, and generally deteriorated when 
copied (digital CDs being a recent exception); 
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2. 



3. 



copies had to be physically transported between parties, which is generally 
slow, inconvenient and expensive relative to the retail price of the media 
being copied; and 

copying was time consuming: copying a one hour vinyl album onto an audio 
tape, for example, took one hour to do. 



Digital content (including software) was also distributed historically on 
physical media such as floppy disks or CDs. While this content is digital and thus 
does not deteriorate when properly copied, widespread copying is generally 
frustrated by the transporting difficulties and time consuming nature of the copying 
10 process described above. 

However, with the emergence of pervasive digital communication networks 
like the Internet, the landscape has changed considerably. Digital content can now 
be copied with no reduction in quality, and distributed widely with almost no cost, 
effort or time. 

15 To present a framework for discussion, an exemplary Internet system 30 will 

be described with respect to Figure 1. 

The Internet 32 itself is represented in Figure 1 by a number of routers 34 
interconnected by an internet backbone 36 network designed for high-speed 
transport of large amounts of data. User's computers 38 may access the Internet 32 

20 in^TruTnbeT"of~mannersincluding"mo 

telephone line using audio frequencies which requires a modem 40 and connection 
to the Public Switched Telephone Network 42, which in turn connects to the Internet 
32 via an Internet Service Provider 44. Another manner of connection is the use of 
set top boxes 50 which modulate and .demodulate data onto high frequencies which 

25 pass over existing telephone or television cable networks 52 and are connected 

directly to the Internet via Hi-Speed Internet Service Provider 54. Generally, these 
high frequency signals are transmitted outside the frequencies of existing services 
passing over these telephone or television cable networks 52. 



30 which provide digital content and software applications to the User's computers 38. 
Communications between user's computers 38 and the rest of the network 30 are 
standardized by means of defined communication protocols. 

Internet Service Providers (ISPs) 44, 54 or Internet Access Providers (lAPs), 
are companies that provide access to the Internet. ISPs 44, 54 are considered by 



Web sites are maintained on servers 56 also connected to the Internet 32 
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sonie to be distinguished from lAPs in that they also provide content and services to 
their subscribers, but in the context of this document the distinction is irrelevant. For 
a monthly fee, ISPs 44, 54 generally provider end users with the necessary software, 
username, password and physical access. 

Equipped with a telephone line modem 40 or set top box 50, one can then log 
on to the Internet 32 and browse the World Wide Web, and send and receive e-mail. 
Digital content can be widely distributed over this system 30 in a number of manners 
including: 

1 . posting content on Web sites stored either on the servers 56 or on the 
resources of the ISPs 44, 54 themselves; 

2. employing peer to peer (P2P) software on a server 56 which allows users to 
access files stored on one another's computers 38; or 

3. simply e-mailing the content files between users. 

Figure 1 is something of a simplification, as ISPs are often connected to the 
Internet 32 through Network Access Points (NAPs), rather than directly as shown in 
Figure 1. As well, the Internet itself is far more complex Jhan that shown in Figure 
1. However, these details would be well known to one skilled in the art and are' not 
pertinent to the present discussion. 

If the above problems could be overcome, not only would existing content be 
protected, but many other Content Owners would be encouraged to make their 
content and services available on the Internet and similar networks. This would 
result in far greater expansion of computer networks, content and services than even 
seen today. 

There is therefore a need for a method and system of securely distributing 
media content over the Internet and similar networks, provided with consideration for 
the problems outlined above. 

Summary of the Invention 

It is therefore an object of the invention to provide a method and system 
which obviates or mitigates at least one of the disadvantages described above. 

One aspect of the invention is broadly defined as a method of distributing 
electronic media comprising the steps of: downloading a media file including an 
integral decryption engine and encrypted media content; requesting a decryption key 
from a remote server, and responding to receipt of the decryption key from the 
remote server by: decrypting the media content using the integral decryption engine. 



WO 01/65796 




PCT/CA01/00250 



-4- 

Another aspect of the invention is defined as a computer readable memory 
medium for storing software code executable to perform the steps of: downloading a 
media file including an integral decryption engine and encrypted media content; 
requesting a decryption key from a remote server; and responding to receipt of the 
decryption key from the remote server by: decrypting the media content using the 
integral decryption engine. 

A further aspect of the invention is defined as a carrier signal incorporating 
software code executable to perform the steps of: downloading a media file including 
an integral decryption engine and encrypted media content; requesting a decryption 
key from a remote server; and responding. to receipt of the decryption key from the 

remote server by: decrypting the media content using the integral decryption engine. 

r ...... 

Brief Description of the Drawings 

These and other features of the invention will become more apparent from 
the following description in which- reference is made to the appended drawings in 
which: 

Figure 1 presents a physical layout of an exemplary communication network as 
known in the art; 

Figure 2 presents a flow chart of an exemplary method of content distribution as 

known~in the art; ; - ; 

Figure 3 presents a flow chart of a rhethod of content distribution in a broad 
embodiment of the invention; 

Figure 4 presents a layout of an MPE Interface screen in a preferred embodiment of 
the invention; 

Figure 5 presents a diagram of the MPE file structure in a preferred embodiment of 
the invention; 

Figure 6 presents a diagram of information flow in a preferred embodiment of the 
invention; 

Figure 7A and 7B presents a flow chart of a method of file distribution in a preferred 

embodiment of the invention; 
Figure 8 presents a layout of the Track Info screen of the MPE Encoder in a 

preferred embodiment of the invention; 
Figure 9 presents a layout of the MPE Info screen of the MPE Encoder in a 

preferred embodiment of the invention; 
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Figure 10 presents a layout of the Rights Info screen of the MPE Encoder in a 

preferred embodiment of the invention; and 
Figure 11 presents a layout of the MPE Editor screen in a preferred embodiment of 

the invention. 

5 

Description of the Invention 

A methodology which addresses the objects outlined above, is presented as 
a flow chart in Figure 3. This figure presents a method of managing distribution of 
proprietary electronic media where the user locates and downloads a single 
10 executable file containing the content he desires, at step 70. When this file is 
executed at step 72, it performs two tasks: 

1. first, it decrypts the media file using an integral decryption engine and a 
decryption key; and then 

2. it presents the decrypted content of the media file to the user, using an 
1 5 integral viewer, player or other suitable software application. 

The user may locate and download the content he desires in many ways, as 
known in the art. This may include, for example: - 

1. downloading content posted on a Web site stored either on a web server 56 
or on the resources of an ISP 44, 54 or ASP; 
20 2. downloading content from another computer 38 in a peer to peer (P2P) 
network such as Napster or Gnutella; or 

3. receiving a media file via e-mail from another user or company. 

This download may be received over any suitable communication network as 
known in the art, and may consist of several different networks working together. 

25 Such networks would include wireless networks such as cellular telephone networks, 
the public switched telephone network, cable television networks, the Internet, ATM 
networks, frame relay networks, local area networks (LANs) and wide area networks 
(WANs). The device employed by the user to perform these method steps may be a 
personal computer (PC), smart terminal, television set top box, personal digital 

30 assistant (PDA), Internet-ready telephone or other similar device. Such devices are 
well known in the art. 

The nature of the media file that has been requested does not limit the scope 
of the invention. This document generally describes music files because of the 
current demand in that market, but any content could be distributed with this method 

35 including text, graphics, video, audio files, executable applets, data files or software 
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files. Media content that is currently distributed physically could easily be distributed 
in this manner, including books, magazines, newspapers, promotional multimedia, 
technical journals, music videos, movie trailers and complete movies. Accordingly, 
the viewer or player may be of any type known in the art, that corresponds to the 
nature of the media content being downloaded. 

The type of encryption employed also does not limit the invention. 
Asymmetric encryption techniques such as PGP, Diffie-Hellman and RSA are 
preferred, but symmetric techniques may also be employed. Asymmetric encryption 
techniques are those which employ private and public key pairs, one key being used 
for encryption, and one for decryption. Symmetric techniques use a single secret 
key, the same key being used for both encryption and decryption. 

The concept that is most important in the invention, is that the content, 
decryption engine, and viewer or player, be downloaded and executed as a single/ 
executable file. The decryption key is not generally integral within this executable 
file, as downloading it independently provides an additional layer of security. This is 
discussed in greater detail hereinafter. In this manner, the invention of Figure 3 
addresses the problems in the art as follows: 

1 . it improves ease of use: The user does not have to configure several 
independent software programs such as: decompression, decryption, player 

or viewerrThe user simply-exeeutes-a-simple-downloaded file —Hence ,-the_ 

method of the invention is more likely to work correctly; 

2. it is more difficult to attack, because it does not have the discrete 
components and stored intermediate files that multi-step methods do; and 

3. it protects the content, because a decrypted file is never stored on the client, 
only the encrypted version. Thus, the client can only copy or transmit the 
encrypted version, and not the decrypted version of the media content. 
Thus, the digital media distribution system of the invention enables Content 

Owners to distribute their content in a secure digital format through the Internet and 
other networks rather than on a physical media. 

It is also possible to obtain some of the benefits of the invention by 
implementing portions of it. For example, in applying the invention to a Macintosh™ 
environment, it may be necessary to download the media player separately rather 
than integral with the downloaded media file. In such a case, the decryption engine 
can be configured to automatically launch the external player without having a„„ 
decrypted copy of the media file stored locally. 
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The preferred embodiment of the invention as described hereinafter, adds 
further features which allow the content files to be securely redistributed and passed 
along to other users. As well, the media content file contains electronic commerce 



5 the respective rights holders. 

Description of the Preferred Embodiment 

The preferred embodiment of the invention will now be described with respect 
to Figures 4 through 11. These figures present an implementation of the invention 
10 in the context of music file distribution, but of course, the invention may be applied to 
many other types of media files. Because of the application to music, the song files 
are stored in MP3 format and the components of the system are refered to as 
MPE™ components (for MP3 Encrypted). 



15 with built-in ercommerce, digital rights management, distribution and visual display. 
It combines a DRM solution with an e-commerce system and clearinghouse function, 
wrapped up in a. secure and accessible delivery system. 

MPE files do not require an external player or any other lengthy downloads, 
as each file contains an embedded player; MPE files automatically play when clicked 

20 on. The system of the invention works oh both PC arid Macintosh platforms and can 
easily be implemented on other platforms. It is a much richer and more powerful 
marketing tool than any other system on the market today. 

In the preferred embodiment, MPE files can be distributed through three 
different pricing models. The first is Free, which provides no security, but does 

25 enhance the content with a rich media experience. The second model is Pay, which 
allows consumers to preview a section of the track at full quality before they are 
prompted to pay money to unlock the remainder of the track. The third model is 
Sponsored, which allows consumers to preview a section of the track at full quality 
before they are prompted to view a sponsor's Website (advertisement) to unlock the 

30 remainder of the track. 

There are a number of further inventive concepts employed by the preferred 
embodiment which result in numerous additional benefits to consumers and content 
providers. One of the major concepts is that of bonding a purchased media file to 
the user's computer and transmitting this bonding information back to an MPE server 



capabilities and digital rights management ensuring that revenues are distributed to 



The system of the invention is a complete, secure, media distribution system, 
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10 



which is administrating the purchase of the MPE file. This technique offers many 
benefits, including: 

1 . it offers a further safeguard against copying of content files as the bonding 
will only allow the downloaded file to be played on one specific system - the 
one to which the content file has been bonded; 

2. it allows mobility as the Consumer can move rights from one computer to 
another. This is important as varied Internet based devices become more 
common (PDAs, PCs, laptop computers, Internet-ready cellular telephones, 
etc") and users have more than one such device. A user could download a 
file to a MP3 player, for example, if it is Web connected; 

3. it allows recovery in the event of a hardware failure on the Consumer's 
equipment. For example, if the user's computer crashes and he loses access 
to the MPE files he has downloaded, he can simply authenticate himself to 
the MPE Server and obtain new licensed copies; and 

4. it provides an additional level of authentication for the user. 

The preferred interface 80 on the Consumer side is presented in the diagram 
of Figure 4. This is the display that will appear to the end user when he executes a 
media file encrypted in the manner of the invention (referred to as MPE files 
hereinafter). This interface 80 is designed to be logical and intuitive, providing 
^ffiaentTl^ibili^ 

easily grasp what they are dealing with. -.""*; 

The MPE interface 80 includes a graphics window 82 which may display an 
album cover or other graphics, allowing for branding and product association. The 
graphics window is a full-colour 128 x 128 pixel bitmap. Other pixel configurations 
and data formats such as GIF, JPEG or TIFF, could also be used. The flexibility of 
this and other elements in the MPE interface 80 will become more clear from the 
description of other elements of the invention which follow. 

A text box 84 is also included which may display unlimited text in rich text 
format (rtf) or a similar format. The background colour can be modified, as well as 
font, font colour, and alignment on a character by character basis. Font selection 
includes all standard Web fonts available on both Windows™ and Macintosh™ 
operating systems. The text box 84 has a vertical scroll bar 86 which allows the user 
to quickly scan through the presented text.* 
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Control buttons are preferably provided as follows: 

1. a "Web" button 88 which provides links to the Web site of the artist or 
recording label, allowing the Consumer to obtain additional or related 
information; 

2. a "Buy CD" button 90 which provides a Web link to buy the CD. Clicking on 
this button can direct consumers to any Web site selling the CD or other 
related merchandise. Alternatively, this button could be used as a secondary 
Web link; 

3. a "Buy Track" button 92 which initiates the purchase process. Clicking on 
this button takes the Consumer to a Buy screen, in which the text box 84 and 
button set 88 - 94 are replaced with text and buttons appropriate to the 
purchase process (described in greater detail with respect to Figures 7A and 
7B); and 

4. a "Get Player" button 94 to install a full-featured player application, allowing 
construction of playlists, support of other common formats, full transport 
controls and Internet radio reception. As single tracks are downloaded in 
executable format, it is not necessary to download the player separately in 
order to perform standard functions. 

The MPE interface 80 also includes the most commonly used player controls: 
a play pushbutton 96 and volume control 98, so the user can play tracks without 
* having to install a full player application. 

Media File Structure 

Each MPE file has the same file structure, no matter which track is encoded 
25 within it. Figure 5 presents a layout of the preferred file structure. 

When an MPE file 110 is executed, the MPE Bootstrap 112 un-compresses 
and launches the MPE Player 114, which is compressed to allow for efficient 
download and transfer of the MPE file 110. The MPE Player 114 is actually the fully 
functional Destiny Media Player, but the MPE Player 114 does not install unless the 
30 user clicks on the "Get Player" button 94 on the MPE interface 80. 

The File Allocation Table (FAT) 116 simply tells the user's computer 38 
where the different parts of the MPE file 110. such as the MPE Bootstrap 112 and 
MPE Player 114, begin and end. This is required, for example, so that the user's 
computer 38 does not attempt to play audio from the MPE Player 114 program data. 



10 
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Contained within the Encrypted MPE section 118 are several elements. 
The Header 120 confirms that the file is structured in MPE format, so that the 
MPE Player 114 interprets the data correctly. 

The Song Specification block 122 contains several pieces of data, including: 
5 • the Song ID; 

Distributor ID (and whether that Distributor has an exclusive license to the 
content); 

the Type of file (MP3 f WAV or AVI for example); 
playback length of the content in seconds; and 
10 • data as to where the Song Preview section 124 begins and ends, and . 
whether or not it fades on its beginning and ending. 

The Song Preview section 124 is not as strongly encrypted as the remainder 
of the song, being encrypted with a weak 32 bit key stored in the header 120. This 
does, however, prevent consumers from extracting that audio information without an 
15 MPE player. 

The surrounding song 126 is encrypted such that it can only be played on the 
hardware' on which it was purchased (bonding to the user computer 38 as described 
above). If the content has not been purchased, only the Song Preview section 124 
can be accessed. Note that any portion of a song can be identified as the Preview 
20 Section 124, for example: the firsFminute7all"of"the song7WWne~ofitat-aIlr The 
example presented in Figure 5 shows a portion in the middle of the song. 

Flow of Information 

In the preferred embodiment, there will generally be four parties, as 
25 presented in Figure 6: the Consumer 130, the Content Owner 132, MPE servers 134 
and the distribution server 136. It is possible of course, for a single party to perform 
the functions of more than one of these entities, or for information to flow through 
different channels. These variations would be clear to one skilled in the art from the 
description of the invention herein. 
30 Note that the MPE Servers 134 are referred to in the plural, because their 

functionality may be implemented by multiple, independent servers. 

The process comprises two phases. During the first phase, the Content 
Owner 132 interacts with the MPE Servers 134 and the distribution server 136 to 
encrypted content into an MPE file 110 and to make listings of it available on the 
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distribution server 136. In the second phase, the Consumer 130 interacts with the 
MPE Servers 134 and the distribution server 136 to identify and download the 
desired content, to preview it, then to decrypt it if he so desires. 

The path in which information flows in the exchange of information between 
5 the MPE Encoder 138 and the MPE Servers 134, or between the MPE Player 140 
and the MPE servers 134, is transparent to both the Content Owner 132 and the 
Consumer 130. 

In detail, the hidden flow of information as it passes from Content Owner 132 
to the Consumer 130 may be described as follows, the letters below referring to the 

10 reference letters in Figure 6. 

A First, source data (CD, WAV or MP3, plus image and text information) is 

input into the MPE Encoder 138, by the Content Owner 132 from which the 
MPE Encoder 138 determines the Song Information. The Song Information 
does not contain the song itself. 

15 B The MPE Encoder 138 then transmits the Song Information to the MPE 
Servers 134, where it is stored in an MPE database. The MPE database 
generates a Song ID for that specific file. The MPE servers 134 also 
generate a Song Key for the purpose of encrypting the song. The Song Key 
is used to add encrypted digital rights to the media file 110. These rights 

20 include, a description of who should be compensated, and how much they 

should receive for each download. The media files 110 can. now be made 
freely available anywhere on the World Wide Web, with the security that the 
artist will be paid for each download that is executed. Note that the song 
itself is not stored on the MPE servers 134. 

25 C The MPE servers 134 send the Song ID and Song Key to the MPE Encoder 
138. The MPE Encoder 138 uses the Song Key to encrypt the Song. 
D The MPE Encoder 138 generates an MPE file 110 as described with respect 
to Figure 5, which is encrypted and contains the Song ID. This MPE file 110 
can now be distributed, and is sent to one of the distributor servers 136. 

30 This completes the first phase of the process. 

E The Consumer 130 may then download a desired MPE file 110 and play the 
preview section 124 of the MPE file 110 on his hardware, using either the 
built-in MPE Player 140 or a compatible player already installed on his 
system 38. 



WO 01/65796 PCT/CA01/00250 

-12- 

F The MPE Player 140 obtains a "digital fingerprint" of the user's computer 38 
or registration ID of the portable device, to determine the User Key. This is 
how the executable file will be bonded to the user's computer 38. 

G When the Consumer 130 elects to purchase or otherwise unlock the 
5 encrypted section 126 of an MPE file 110, the MPE Player 140 sends the 

Song ID, User Key, Distributor ID, User ID and User Password to the MPE 
servers 134. 

H If this information can be authenticated, and it is confirmed that the e- 

commerce model can be executed, the MPE servers 134 send a copy of the 

10 Song Key encrypted with the User Key to the MPE Player 140. This 

encryption of the Song Key is different than the encryption of the song. Once 
the MPE Player.140 has this Song Key, it can decrypt and play the song; In" 
the preferred embodiment, the e-commerce model uses a "digital wallet" in 
which Consumers 130 set up- accounts at the MPE servers 134 by depositing" 

15 a sum of money which can be debited against. This model is described in 

greater detail hereinafter. 

After the file is purchased, the MPE Servers 134 track and distribute the 
revenue as per the royalty payment defined by the encoding process. 



20 Process from Perspective of the Consumer 

A detailed flow chart of the MPE delivery system is presented in Figures 7 A 
and 7B. 

The process begins when the Consumer 130 downloads an MPE file 110 in 
some manner, at step 150. As described above, files are typically downloaded from 
25 the Internet utilizing a standard Web browser, but this step is not necessary if the 

Consumer 130 already has the MPE file 110 on their hard drive or on a CD-ROM, or 
if the MPE file 110 was e-mailed to them. This step is only required if the Consumer 
. 130 is downloading.the filefrom the Internet 32. 

In an e-commerce environment, the Consumer 130 will typically search for 
30 MPE files 110 using a search engine, or by visiting known distributors of MPE files 
110. When an MPE file 110 of interest is found on a Web page, the Consumer 130 
clicks on a link to download the file. The Consumer 130 is then prompted to identify 
a location on their local system 38 in which to save the MPE file 110, generally on a 
hard disk. 
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Once the download is complete, the Consumer 130 can play the MPE file 110 
by electing to OPEN it from the download dialogue, or by double-clicking on the MPE 
file 110 itself at step 152. The MPE file 110 will begin playing almost immediately 
upon opening, and graphics and text will be displayed. 
5 Note that many of the decision steps in this flowchart are presented as loops, 

step 152, for example, looping back to itself until a "yes" selection is made. This is a 
simplification of the actual implementation which allows the Consumer 130 to leave 
this routine at any time, either to download a new MPE file 110, or to exit the system 
altogether. It would be clear to one skilled in the art, how to implement such 
10 standard features. 

If the MPE file 110 is identified as free at step 154, the Consumer 130 will be 
able to play the entire audio track at step 156 and the Buy Track button 92 will not 
flash. The routine is then completed. 

If the MPE file 110 is not free, then the routine will determine whether there is 
15 a preview portion of the audio track at step 158, andif so, the preview section 124 
will be played at step 160. Regardless of whether there is a preview section 124 to 
play, the Buy Track button 92 will then begin to flash at step 162. 

If the Consumer 130 selects the "Buy" option by clicking on the Buy Track 
button 92 at step 164, there are two possible purchase process models in the 
20 preferred embodiment: Pay and Sponsored. 

The Pay model is one in which the Consumers 130 will have to pay a fee in 
order to obtain access to the complete and decrypted MPE file 110. Upon 
completing playing the preview portion 124, the Consumer 130 is asked if they wish 
to purchase the song. If the Consumer 130 selects "No", they will only be able to 
25 access the preview portion 124. If they select "Yes", they will have to go through 

registration if they have not done so previously. If they have already registered, they 
will be taken to the "Buy" screen of the MPE Interface 80. 

With the -Sponsored" model, the cost of the MPE file 110 is covered by a 
Sponsor so the Consumer 130 can access it at no cost. However, the Sponsor will 
30 generally require the Consumer 130 to perform certain acts in exchange for the 
access, for example, requiring the Consumer 130 to visit the Sponsor's Web site. 
Many other purchasing models would be clear to one skilled in the art from the 
teachings herein. The invention is not limited to the specific implementations 
presented. 
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Thus, if it is determined that the MPE file 110 is sponsored at step 166 of 
Figure 7B, then control passes to step 168 where the Consumer 130 is given the 
option of visiting the Sponser's Web site in exchange for having access to the 
balance of the MPE file 110. If the Consumer 130 selects "No", then the routine 
5 terminates, having allowed the Consumer 130 to access only the preview portion 124 
of the MPE file 110. If the Consumer 130 selects "Yes", their default Web browser 
will open to the Sponsor's Web site at step 170 and the balance MPE file 110 will be 
unlocked at step 172 by transferring the "Song Key" from the MPE servers 134 to 
the Consumer 130. The MPE file 110 will begin immediately playing from start to 

10 finish at step 174. 

If the MPE file 110 is identified as "Pay" model based at step 166, then 
control passes to step 176 where it is determined whether the Consumer 130 is 
registered. If the Consumer 130 is not registered, control passes to step 178 where 
the Consumer 130 obtains registration by entering an e-mail address and a 

1 5 password or PIN (personal identification number). For purposes of verifying identity 
in the event of a lost PIN, the Consumer 130 is also prompted to enter in a personal 
"question with an answer which only they would know. 

Once registered, the Consumer 130 is taken to the Buy screen of the MPE 
interface,8,0_atjsMpJM^The^ Consum er 130 is sh own their number of credits and 

20 the cost of the track, as well as the projected balance of credits should they decide 
to purchase the MPE file 110. A discussion of the preferred credit system is outlined 
hereinafter. While the preferred embodiment employs a credit or "digital wallet" 
system, any other electronic commerce solution may be employed including credit 
cards, debit cards, smart cards or e-cash. 

25 Control then passes to step 182 where the Consumer 130 is given four 

choices: 

1. to "Buy" the current MPE file 110; 

2. to "Cancel" the transaction; 

3. to "Review" their purchase history; or 
30 4. to "Buy Credits". 

Details of how these four selections could be executed would be clear to one 
skilled in the art from the description herein, and would vary widely with the nature of 
the electronic commerce solution being employed. 
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For example, if the Consumer 130 has sufficient credits to buy the current 
MPE file 110, they may proceed with the purchase process. Clicking on the "Buy" 
button prompts the Consumer 130 to identify himself by entering his Password or 
PIN. If he has forgotten his Password, a new replacement password can be emailed 
5 from the MPE servers 134 to the Consumer 130. 

If the Consumer 130 has sufficient credits to purchase the track and has 
authenticated himself (i.e., has entered his Password correctly), the purchase will be 
processed and he will be notified that the transaction is completed. Clicking w OK n will 
immediately unlock the MPE file 110 and begin playing the MPE file 110 from start to 
10 - finish. — 

If the Consumer 130 does not have sufficient credits to purchase the MPE file 
110, they will need to buy credits. Clicking "BUY CREDITS" from the Buy screen of 
the MPE interface 80 will open up the MPE Secure Credit Purchase Web site on the 
consumer's default Web browser. Here the Consumer 130 is prompted to identify 
15 himself by entering his PIN. After successfully authenticating himself, the Consumer 
130 is given the choice of buying credits in $10; $25, $50 or other-sized blocks. 

Having selected the number of credits they wish to purchase, the Consumer 
130, is prompted to verify that this is the number of credits they wish to purchase. If 
they select "No", they are allowed to enter another amount and proceed with the 
20 credit purchase. If they select "Yes" they are prompted to enter their billing and 
credit card details. 

Having submitted their credit card details, the Consumer 130 is presented 
with an itemized and totaled transaction summary for verification. The summary 
includes appropriate sales or other taxes. If the summary is acceptable to the 
25 Consumer 130, they click "Process my order". 

If the credit card information submitted by the Consumer 130 was correct, 
they are informed that the transaction has been approved and they are shown their 
new credit balance. If the credit card information is invalid, the Consumer 130 is 
prompted to re-enter their details. 
30 The credit information in the MPE Buy screen is now updated and the 

Consumer 130 can complete the purchase process. 

If the Consumer 130 clicks on the "Cancer button, the transaction is 
terminated. If the Consumer 130 selects "Review Purchase History", a summary of 
his previous transactions is downloaded to him from the MPE servers 134. 
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MPE Encoder 

MPE files 110 are generated by the Content Owner 132 using the MPE 
Encoder 138. The MPE Encoder 138 is designed to make the creation of secure 
5 files easy and quick, while providing a wide range of flexibility for the establishment 
- - of branding. Figures 8, 9 and 10 present the three main screens that interface the 
Content Owner 132 with the MPE Encoder 138. 

Figure 8 presents the layout of the "Track Info" screen 190, which consists of 
two panes 192 and 194. The upper pane 192 has labels and fields which allow for 
10 the entry of basic track information, such as: artist, song title, composer, genre, 

copyright information and album title. This information is automatically entered into 
the MPE file 110 as ID3 tags. ID3 tags are 128 byte data blocks that are attached at 
the end of the audio data in an MP3 file. ID3 tags are known in the art, and are used 
to carry non-audio information relevant to an MP3. 
15. Different information fields may be included in such a pane 192 particularly if - 

the invention is being applied to a different mediarsuch as magazine articles. 

Information entered into the Track Info screen 190 is automatically carried 
forward to the MPE Info screen 220 in Figure 9, where it is used to generate default 
content for the MPE text box 222 . ^ 
20 The lower pane 194 of the Track Info screen 190 (from "Preview" to the 

bottom of the window) is a common pane shared by all three screens in the MPE 
Encoder 138. 

Checking the Preview box 196 will indicate whether the identified song 
includes a preview section (in the case of a Pay or Sponsored track) or not (in the 

25 case of a Free track). 

The bar 198 beside the Preview check box 1 96 allows for selection of the 
Preview section 124 on the basis of time. The Preview section 124 can be of any 
length, from 0 seconds to the entire length of the song. Preview lengths typically 
vary from 20 to 60 seconds, with 30 seconds being the most common length. 

30 Clicking and dragging either edge of the selected Preview section 124 allows for 
movement of the beginning or end of the Preview section 124~without affecting the 
other extreme. In the example of Figure 9, a song with a length of 2 minutes and 50 
seconds is presented, with the Preview section 124 running from 1:17 to 1:47 of the 
elapsed time of the song. Clicking and dragging the middle of the selected Preview 
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section 124 allows for movement of the entire Preview section 124 without affecting 
its overall length. 

Double-clicking on either of the triangular markers 200 at the extremes of the 
selected Preview section 124 toggles between a straight start/stop or a fade. These 
5 approaches can be combined (for example, a straight start with a faded ending, or 
vice versa). The example shown in Figure 8 indicates a fade on both the beginning 
and the end of the Preview section 124. 

The "Source File" field allows for the selection of a source file for encoding 
into MPE format. The source file can be an MP3, WAV, AVI, audio CD or similar 
10 audio file. If the source is WAV or audio CD, the resultant MPE file 110 will be 
encoded at 128 kbps. If the source is in MP3 format, the MPE file 110 will be 
encoded at a bit rate equal to that of the source MP3, allowing for higher quality MPE 
files 110 (with longer file lengths). Source file names could be entered into this field 
in a number of other manners known In the art such as: being dragged and dropped, 
15 cut and pasted, or being located on the Content Owner's system using a "browse- 
button. 

The Output Path field indicates where the new MPE file 110 will be stored. 

As a default the new MPE file 110 will be written with a file name of "[Source 

File]. MPE. EXE" where [Source File] is the portion of the Source File's name before 
20 . its .MP3, .WAV, or .CDA extension. If a file by that name already exists in the 

Output Path, a number (1 , 2, 3 etc.) will be appended to the end of the file name 

before the ".MPE. EXE" extension. 

Clicking on the "New 11 button will erase all entered data and start the MPE 

encoding process again, for the entry of an entirely new MPE file 110. 
25 ~ Clicking on the "Play" button will play the Preview section 124, allowing the 

Content Owner 132 to test and edit the Preview section 124. While the Preview 

section 124 is playing, this button reads "Stop", and clicking on it will stop the 

playback. 

Clicking on the "Encode" button will begin the final stage of the encoding 
30 process and write the MPE file 110 to the location given in the "Output Path" field- 
While encoding is being performed, this button reads "Cancel", and clicking it will 
end the encoding process. 
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The preferred layout of the MPE Info screen 220 is presented in Figure 9. 
This screen serves primarily to establish branding and deliver rich content associated 
with the MPE file 110. 

As noted above, information entered into the Track Info screen 190 of Figure 
5 8 will automatically generate default content for the MPE text box 222. The text box 
222 is in rich text format, and allows for the background colour to be changed to any 
true colour value. Font, colour, size and attributes (bold, italic, underlined) can all be 
adjusted on a character by character basis, and alignment (left, right, centered) can 
be adjusted on a line by line basis. Rich text can be cut from other files or external 
t0..« applications and pasted into this panel. 

An album cover image or similar graphic file can be included with the MPE 
file 110, by loading it into the album cover window 224. This graphic file can be of 
any format known in the art, including a bitmap, JPEG or GIF. In the preferred 
embodiment, a bitmap of 128 by 128 pixels in size is used.- If the.£ontent- Owner 
1 5 132 provides an image not matching these dimensions, it will be scaled (maintaining 
the aspect ratio) such that its largest dimension is equal to 128 pixels in size. The 
small flower buttons 226, 228 above the album cover image open and close image 
files. Graphics can be dragged and dropped or cut and pasted, into this panel. 

Fields for entry of two URL (uniform resource locator) links are also provided 



20 in this pane: Artist Web Site and Buy CD. These entries will correspond to the 

"WEB" and "BUY CD" buttons on the MPE Interface 80, respectively, described with 
respect to Figure 4 above. URLs are the addresses used on the Internet to locate 
resources, and their use is well known in the art. In the preferred embodiment, the 
only URLs permitted in these lines are ones beginning with "http:/r or "mailto:". If an 

25 entry is made that does not begin with either of these, "http://" will be automatically 
appended to the beginning of the entry. 

The MPE Info screen 220 provides an important contribution in the 
enhancement of branding which will be of great value to Content Owners 132. 
As noted above, the lower pane of the MPE Info screen 220 is the same 

30 "Preview" pane 194 that appears on the Track Info screen 190 of Figure 8, and is 
described above. 

Figure 10 presents the final screen in the MPE Encoder 138, the Rights Info 
screen 240. This screen provides all the information required by the digital rights 
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15 



20 



25 



management (DRM) aspects of the invention. If a track is free (no preview), this 
screen is unnecessary and disappears entirely. 

The "Pay Amount or Sponsor URL" field 242 allows for entry of a price in US 
dollars for a Consumer 130 to purchase the MPE file 110, or for the entry of a URL 
that Consumers will be forced to view in order to unlock the MPE (generally this will 
be the Sponsor's URL). The Pay and Sponsored models are separate and cannot 
be combined, therefore the Content Owner 132 must determine which model to use 
while in this entry. The "Exclusive" check box 244 allows a file to be reserved for 
one specific distributor 136, such that no other distributor can modify the MPE file 
110 or be paid for sales of the MPE file 110. 

The "MPE Distributor" field 246 allows any previously entered distributor 136 
to be selected from a pull down menu, or for a new distributor 136 and the entry of 
all their details to be created. Compensation can be in terms of a percentage of 
gross revenues, or based on a flat rate. In the preferred embodiment, the distributor 
percentage field is set to default at 25% of gross receipts. If the "Exclusive" check 
box 244 has been selected, this distributor 136 will be the only one who can profit 
from the distribution of this MPE file 110. 

As only one MPE Distributor 136 may be specified at a time, there is only one 
control button associated with the MPE Distributor field 246 - the "New" button. 
Clicking on this button will erase the current entry in the MPE Distributor field 246 
allowing a new entry to be made. 

The "Rights Owner Name and Share" field 248 is set up in a similar manner, 
allowing for the choice of any previously entered rights owner from a pull down 
menu, or for the creation of a new rights owner and the entry of all their details. The 
Rights Owner Share can be set at anything from 1% to 50%, but in the preferred 
embodiment, all Rights Owners must total 50%. 

The Rights Owner Name and Share field has three control buttons / 
associated with it: Add, New and Remove. The Add and Remove buttons simply 
allow the Content Owner 132 to add and remove Rights Owners to and from the 
summary window 250. The "New" button deletes the text currently entered into the 
editing window. 

Like the Track Info 190 and MPE Info 220 screens described in Figures 8 
and 9, the lower pane of the Rights Info screen 240 also includes the same 
"Preview" pane 194 that is described above. 
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MPE Distributor Editor 

The preferred embodiment of the invention also includes an MPE Distributor 
Editor: a software application which allows Web sites or other businesses which 
5 distribute MPE files to alter existing MPE files 110 such that they become the paid 
distributor 136 for any files sold through their distribution chain. The preferred layout 
of the MPE Distributor Editor interface 260 is presented in Figure 11. 

Distributor 136 information is contained outside the encrypted portion of each 
MPE file 110, which allows it to be modified without violating the security of the file. 
1 0 The MPE Distributor Editor makes a copy of each MPE file 110 loaded into it, 
modifying only the Distributor 136 information. 

The "Target" button and associated field 262 identifies the location where the 
modified MPE files 110 will be written. 

The majority of the MPE Distributor Editor Interface 260 is a field 264 for 
1 5 listing tracks to be processed. An unlimited number of tracks can be modified at 
once in a batch process. 

The "Distributor 11 button and associated field 266 allows for the entry or 
adjustment of all contact details for the MPE Distributor Editor. Clicking on the 
"Distributor" button brings up a window with all the contact information for a particular 
20 distributor for easy modification. 

The "Add" button adds one or more MPE files 1 10 to the list 264 to be 
processed, while the "Remove" button removes the currently selected MPE file 110 
from the list of files to be processed. 

Clicking on the "Encode" button begins the process of modifying the selected 
25 MPE files 110 and writing them into the Target directory 262. 

Clicking on the "Cancel" button allows the Encoding process to be terminated 
after it has begun. 

Features and Benefits 

30 The system and method of the invention provides a wealth of features that 

benefit content owners, content distributors and consumers. Key to this are the 
Security, Accessibility, Superdistribution, and Branding Capability that the invention 
provides. 
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1. Security 

Security in digital content represents the degree to which that content is 
protected from unauthorized use. The invention provides security in the form of 
encryption, using sophisticated algorithms to encrypt the media content such that it 
5 cannot be interpreted without the correct decryption key. 

As well, the encryption algorithm is never exposed to the Consumer 1 30 or to - - 
the Content Owner 132. All generation of encryption or decryption keys is done by 
the MPE servers 134 and is never, accessible to the public. The net result. of this 
tightness of control over the encryption/decryption keys is dramatically increased 

1 0 security over any system which allows users to access multiple keys and potentially 
identify patterns within them. 

MPE decryption keys reference multiple identifiers found on the consumer's 
hardware, some of which are unique. Any decryption key will therefore only work on 
one piece of hardware, so MPE files 1 10 can be shared or copied without allowing 

15 any additional users to have free access to the encrypted content of-the MPE file 
110. The Consumer 130 never pomes into direct contact with a decryption key, as 
the issuance and installation of a decryption key is done automatically and 
transparently to the user. Keys are issued between the MPE player 140 and the 
MPE servers 134 without exposing them to the Consumer 130. 

20 The decryption key of each song is itself encrypted with the individual - 

Consumer's key before the MPE server 134 sends this decryption key (the "Song 
Key") to the user's player software 140. This encrypted Song Key can only be 
decrypted by the MPE playing software 140 (such as that built in to every MPE) 
running on that individual's hardware. This is done to prevent piracy through file 

25 copying and sharing and is totally transparent to the Consumer 130, making it a 

. simple but powerful solution for security. 

The Song Key is stored within a file on the Consumer's system 38 to allow 
the Consumer 130 to access the MPE file 110 while off-line. This Song Key is still 
encrypted with the user's key information while being stored. Although the system 

30 would be more secure if it required the user to be online to access their MPE 

content, this is not a practical solution, as the vast majority of Consumers 130 are 
online only part of the time. This file is encrypted yet again, for three levels of 
encryption (the song key, user key, and a third encryption on the key file). 
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These security features and their implementation differentiate the system of 
the invention from other music delivery systems in its robustness and invisibility from 
the Consumer's perspective. This transparent quality not only increases security, it 
further serves to enhance the user experience. 

2. Accessibility 

Accessibility, in the context of media formats, is a measure of the degree to 
which a given format is easily used. A highly accessible format should ideally have 
no barriers to entry and should be simple to understand. Accessibility is necessary 
in a DRM solution because most consumers will not find sufficient motivation to 
overcome any level of difficulty in using a software product for the first time*. In order 
to encourage the general public to embrace a technology, accessibility is required. 

The system and method of the invention provides a highly accessible solution 
by being a self-executing (.EXE) file. This means that simply double-clicking on an 
MPE file 110 on any Windows™ OS (Windows 95, 98, NT, 2000) platform will cause 
the file to open and play itself, regardless of what software the Consumer 130 may 
have installed on his computer 38. This dramatically increases accessibility over 
other solutions which require the Consumer 130 to have installed one or more 
software packages prior to being able to use the content. Any software installment 
Tequirerrient servesas a'barrier to entry-and-reduces-accessibilitv^ The. pr eferred 
system and method of the invention has no software installment requirements. 

MPE files 110 is also playable on Macintosh™ computers (Mac). Although 
the Macintosh does not support Windows-compatible executables directly, the same 
MPE files 110 accessible on a Windows platform can also be accessed on the Mac. 
On the Mac, MPE files 110 require that a player (such as the Destiny Media Player) 
be installed prior to playing the MPE files 110. This does represent a lower level of 
accessibility than on a Windows platform, but preserves the accessibility of any MPE 
file 110 across Windows, Mac, and in future Linux, PalmOS, and other platforms 
without an unmanageable proliferation of formats. As many competing DRM 
solutions do not support the Macintosh at all, the system of the invention has a 
comparatively, very high level of accessibility on that platform. 

Portable digital music playing devices are becoming a very popular way to 
access content in MP3 or other digital formats. The system of the invention can be 
easily supported on units designed to play MP3 files, as each MPE file 110 wraps up 
and may encrypt an MP3 file. In the case of players which have no way to save or 
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copy content (such as Diamond Rio), a decrypted MP3 file can be generated by the 
MPE player software 140 and transferred to the portable player. 

3. Superdistribution 

5 Superdistribution is a quality determined by how "viral" a format is, or how 

easily it can spread itself from one system to another. Having a high degree of 
virality does not indicate any of the negative connotations associated with the term 
"virus"; it merely indicates virus-like behavior and ideally the ability to grow and 
spread from system to system exponentially. 

1 0 The system of the invention is highly viral in that it can be shared between 

computers, delivering the same Consumer experience regardless of how many users 
have handled the file previously. When a Consumer 130 downloads or receives an 
MPE file 110 and goes through the purchase process, they are issued a User Key 
which is generated using references in their specific and unique hardware. The use 

15 of references on the Consumer's hardware is known in the art as "bonding". The 

User Key which results will not function on any other hardware. Therefore, when the 
Consumer 130 shares an MPE file 110 with others, the others will have to follow the 
process of the invention themselves to obtain access to the encrypted content. 
MPE files 110 are very small in size, jn most cases equal in size to a 

20 standard MP3 file plus 350 kilobytes. This typically represents an increase in size of 
5 to 10 percent, adding less than two minutes of download time to a 28.8 modem 
user and only a few seconds to a broadband user. This means that the MPE files 
110 are easily shared with others, whether through distributed computing or through 
e-mail. Since most e-mail services limit message size to 5 megabytes or less, this 

25 means that MPE files 110 of four and a half minutes or less would be e-mailable, 
which would include the majority of music content available today. 

The superdistribution offered by the invention is extremely effective as each 
MPE file 110 continues to track the original distributor 136 even after it has passed 
through one or more consumers 130. Revenues continue to flow to all interested 

30 parties. 

4. Branding capability 

Branding capability represents the ability of a format to communicate an 
individual branding message for different Content Owners 132 using that format A 
35 format with strong branding capability should be able to express the same or 
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enhanced product packaging commonly associated with the content, allowing the 
Content Owners 132 to maintain strong and consistent image and product 
placement. 

The invention has very strong branding capability in that it allows Content 
5 Owners 132 to present a unique full color 128 x 128 pixel bitmap image in each MPE 
files 110. Further, text* is presented in Rich Text Format, allowing for layout, font and 
color variations throughout the text block. The background color of the text block 
can also be modified to further reinforce the branding. 

Automatically determined and supported ID3 tags associated with each MPE 
10 files 110 further reinforce branding by allowing compatible players to associate the 
file clearly with the artist or within the genre appropriate to the content. 

All these features are in stark contrast to MP3, the current download format 
of popular choice, which only provides non-automated ID3 tags and the filename 
itself for branding. 

15 - . . 

Alternative Embodiments 

The method and system of the invention is capable of wrapping and 
delivering any media type. MP3 has been used as an initial product positioning 
decision, and the product will be expanded to serve as a secure digital distribution 
20~~ systef^for6therfile"typesT~Forexample: — - . 



1. MPE encryption and delivery can be used to distribute and sell printed 
materials such as books, reports, magazines and other text over the Internet. 
Analogous to the current audio MPE, text MPE files would provide a preview 
section (which may be the text which would normally be included on a book's 

25 jacket or in advertising literature), as well as graphics and e-commerce 

capabilities; 

2. entire feature films, music videos, training programs and the like, could also 
be distributed over the Internet or similar communication network using the 
system and method of the invention. With fiim, the Preview section 124 could 

30 correlate to the preview trailer or an excerpt of the film. As with audio MPE, 

MPE for film would contain a rich media portion, providing graphics and text 
as well as e-commerce capabilities; and 

3. the invention could also be used as a delivery system for software, vector 

j 

graphic animations and electronic trading cards. j 
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While particular embodiments of the present invention have been shown and 
described, it is clear that changes and modifications may be made to such 
embodiments without departing from the true scope and spirit of the invention. 

The method steps of the invention may be embodiment in sets of executable 
5 machine code stored in a variety of formats such as object code or source code. 
Such code is described generically herein as programming code, or a computer 
program for simplification. Clearly, the executable machine code may be integrated 
with the code of other programs, implemented as subroutines, by external program 
calls or by other techniques as known in the art. 
10 The embodiments of the invention may be executed by a computer processor 

or similar device programmed in the. manner of method steps, or may be executed 
by *an electronic system which is provided with means for executing these steps. 
Similarly, an electronic memory medium such computer diskettes, CD-Roms, 
Random Access Memory (RAM), Read Only Memory (ROM) or similar computer 
1 5 software storage media known in the art, may be programmed to execute such 

- method steps. As well, electronic signals representing these method steps may also 
be transmitted via a communication network. 

The invention could, for example, be applied to computers, smart terminals, 
television set-top boxes, personal digital assistants, cellular telephones, and Internet- 
20 ready telephones. Again, such implementations would be clear to one skilled in the 
art, and do not take away from the invention. 
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WHAT IS CLAIMED IS: 

1 . A method of distributing electronic media comprising the steps of: 
downloading a media file including an integral decryption engine and encrypted 

media content; 
requesting a decryption key from a remote server; and 
responding to receipt of said decryption key from said remote server by: - 

decrypting, said media content using said integral decryption engine. - 

2. The method of claim 1 , further comprising the step subsequent to said step 
of decrypting, of: 

viewing said media content by executing viewer software integral with said media file 
whereby a decrypted copy of said media content is not stored locally. 

3. The method of claim 1 , further comprising the step subsequent to said step 
of decrypting, of: 

viewing said media content by executing external viewer software linked to said 
media file, whereby a decrypted copy of said media .content is not stored 
locally. - - 

A- A-method-of-manaqinq-distnbution-of-proprietao/_ele ctronic media com prisjng 

the steps of: 
downloading a single file executable to: 

decrypt an integral media file using an integral decryption engine and a 
decryption key; and 

view said decrypted media file using an integral viewer. 

5. The method of claim 4, wherein said step of downloading comprises the step 
of: 

downloading said single file from a remote server via a communication network. 

6. The method of claim 5 further comprising the step of: 

downloading said decryption key from said remote server via said communication 
network. 

7. The method of claim 6 further comprising the steps of:j£- - . 
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requesting a decryption key from a remote server; and 

said remote server responding to said request and responding to a digital wallet 
having sufficient funds, by returning said decryption key. 

8. The method of claim 7, further comprising the step of: 

bonding said media file to a computing device from which said request has initiated. 

9. A method of securely distributing media files comprising the steps of: 
generating an executable, encrypted media file which will execute to play only a 

portion of the corresponding original media file, without use of a decryption 



10. The method of claim 8, wherein* said step of bonding comprises the step of: 
communicating bonding information back to said remote server for storage. 

1 1. The method of claim 5, wherein said remote server tracks an originating Web 
site, enabling.it to distribute revenues to rights holders. 

12. The method of claim 2, wherein said media file includes Web links to one or 
more of: artist, retailer, distributor and record label. 

13. A method of secure distribution of content over a communication network 
comprising the steps of: 

a Consumer sending a request to an Internet Service Provider (ISP) for a media file; 

said ISP returning said media file to said consumer, said media file being wrapped in 
a single executable file including an integral decryption engine. 

14. A system for executing the method of any one of claims 1 through 13. 

15. A computer readable memory medium for storing software code executable 
to perform the method steps of any one of claims 1 through 13. 



key. 



16. 



A carrier signal incorporating software code executable to perform the 
method steps of any one of claims 1 through 13. 
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